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DETAILED ACTION 
Claim Objections 

1 . Claim 56 is objected to because of the following informalities: Claim 56, line 1 , 
after "claim", "56" needs to be changed. Appropriate correction is required. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1 ), (2), and (4) of section 371 (c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AIPA (pre-AlPA 35 U.S.C. 102(e)). 

3. Claims 1-26, 29-42, 45-52, 55 and 56 are rejected under 35 U.S.C. 102(e) as 
being anticipated by Horst et al. (U.S. Patent No. 6,157,967). 

Referring to claim 1 , Horst et al. discloses a method for controlling access to a 
network, the method comprising: 
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for each node connected to the switch (Fig. 19A and respective portions of the 
spec), receiving from a network manager (CPU, col. 6 lines 1-16) addresses to which 
the node is authorized to transmit a communication; 

receiving (receives, col. 6 lines 1-16) a communication from a node, the 
communication having a destination address; 

determining based on the received addresses whether the node that transmitted 
the communication is authorized (authorized, col. 6 lines 1-16) to transmit a 
communication to the destination address (destination address, col. 6 lines 1-16); and 

when it is determined that the node is not authorized (unauthorized, col. 6 lines 
9-13), suppressing (discard, col. 6 lines 10-16) the transmitting of the received 
communication through the network.. 

Referring to claim 2, Horst et al. discloses the method of claim 1 wherein the 
address is a virtual address (virtual address, col. 18 lines 65-67 and col. 20 lines 55-59). 

Referring to claim 3, Horst et al. discloses the method of claim 1 , wherein the 
switch (see Figure 19A and respective portions of the spec.) has multiple ports, wherein 
each port is connected to a node, and wherein each port has access to the received 
address to which the connected-to node is authorized (authorized, col. 6 lines 1-16) to 
transmit a communication. 

Referring to claim 4, Horst et al. discloses the method of claim 1, including 
storing the received addresses in a label table (table, col. 7 lines 30-52 and col. 13 lines 
20-26) and col. with a port of the switch that is connected to the node. 
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Referring to claim 5, Horst et al. discloses the method of claim 1 , including 
notifying (notify, col. 6 lines 10-16) the network manager that the node is not authorized 
(unauthorized, col. 6 lines 9-13) to transmit received communications. 

Referring to claim 6, Horst et al. discloses the method of claim 1 , including 
indicating that the node is no longer authorized (authorized, col. 6 lines 1-16) to transmit 
any communication. 

Referring to claim 7, Horst et al. discloses the method of claim 6, wherein 
received addresses are stored (store, col. 29 lines 55-60) in association with the node 
and the indicating includes removing the association of an address with the node. 

Referring to claim 8, Horst et al. discloses the method of claim 6 wherein the 
indicating that the node is no longer authorized (unauthorized, col. 6 lines 9-13) to 
transmit to the address occurs in response to an indication from the network manager 
that the node is no longer authorized (unauthorized, col. 6 lines 9-13) to transmit to the 
address. 

Referring to claim 9, Horst et al. discloses the method of claim 6 wherein the 
indicating that the node is no longer authorized to transmit to the address occurs in 
response to expiration of a timeout period (timeout period, col. 28 line 65-col. 29 line 7). 

Referring to claim 10, Horst et al. discloses the method of claim 6 wherein the 
indicating that the node is no longer authorized to transmit to the address occurs in 
response to detecting a condition (condition, col. 6 lines 1-16) in a physical layer of a 
link between the switch and the node. 
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Referring to claim 11, Horst et al. discloses the method of claim 1 wherein an 
address is received from the network manager during registration (initialization, col. 65 
lines 45-52) of the node. 

Referring to claim 12, Horst et al. discloses the method of claim 1 including when 
it is determined that the node is authorized, transmitting the received communication to 
the destination address (destination address, col. 6 lines 1-16). 

Referring to claim 13, Horst et al. discloses the method of claim 1 , wherein the 
receiving includes receiving a filter parameter (priority, col. 44 lines 10-15 and col. 44 
line 59-col. 45 line 6) that indicates valid data of a communication from the node. 

Referring to claim 14, Horst et al. discloses the method of claim 13, including 
when the received communication does not satisfy a filter parameter, discarding 
(discard, col. 6 lines 10-16) the received communication. 

Referring to claim 15, Horst et al. discloses the method of claim 14 wherein the 
filter parameter is priority (priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6). 

Referring to claim 16, Horst et al. discloses the method of claim 14 wherein the 
filter parameter is class of service (class, col. 39 lines 58-60). 

Referring to claim 17, Horst et al. discloses a method in a routing device for 
controlling access to a network, the method comprising: 

receiving a filter (header, Fig. 3B and respective portions of the spec.) for a node, 
the filter indicating a valid parameter for a communication transmitted by the node 
through the network; 
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receiving a communication from the node, the communication having a 
parameter (priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6); 

determining whether the parameter of the received communication is valid 
(validation, col. 17 line 53 - col. 18 line 10 and validate, col. 18 lines 30-35) based on 
the received filter (header, Fig. 3B and respective portions of the spec); and 

when it is determined that parameter of the received communication is not valid, 
suppressing (discard, col. 6 lines 10-16) the transmitting of the received communication. 

Referring to claim 18, Horst et al. discloses the method of claim 17 wherein the 
parameter is a virtual address (virtual address, col. 18 lines 65-67 and col. 20 lines 55- 
59) and the filter (header, Fig. 3B and respective portions of the spec.) indicates one or 
more virtual addresses (virtual address, col. 18 lines 65-67 and col. 20 lines 55-59) that 
'can be validly used in a communication transmitted by the node. 

Referring to claim 19, Horst et al. discloses the method of claim 17 wherein the 
parameter relates to priority (priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 
6) of a communication and the filter (header, Fig. 3B and respective portions of the 
spec.) indicates a priority (priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6) 
that can be validly used in a communication transmitted to by the node. 

Referring to claim 20, Horst et al. discloses the method of claim 17 wherein the 
parameter relates to class of service (class, col. 39 lines 58-60) of a communication and 
the filter (header, Fig. 3B and respective portions of the spec.) indicates a class of 
service (class, col. 39 lines 58-60) that can be validly used in a communication 
transmitted by<the node. 
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Referring to claim 21 , Horst et al. discloses the method of claim 1 7 wherein the 
routing device (see Fig. 19A and respective portions of the spec.) has multiple ports, 
wherein each port is connected to a node, and wherein each port has access to a 
received filter (header, Fig. 3B and respective portions of the spec.) for the connected to 
node. 

Referring to claim 22, Horst et al. discloses the method of claim 17 wherein the 
received filter (header, Fig. 3B and respective portions of the spec.) is associated with a 
destination address assigned to the node and wherein the filter (header, Fig. 3B and 
respective portions of the spec.) is applied to communications transmitted by the node 
that have destination address (destination address, col. 6 lines 1-16). 

Referring to claim 23, Horst et al. discloses the method of claim 17 including 
notifying a network manager when the transmitting of a communication is suppressed 
(discard, col. 6 lines 10-16). 

Referring to claim 24, Horst et al. discloses the method of claim 17 wherein the 
filter (header, Fig. 3B and respective portions of the spec.) is received from a network 
manager. 

Referring to claim 25, Horst et al. discloses the method of claim 17 wherein the- 
filter (header, Fig. 3B and respective portions of the spec.) is received from the network 
manager based on registration (initialization, col. 65 lines 45-52) of the node. 

Referring to claim 26, Horst et al. discloses the method of claim 17 wherein the 
routing device is a switch (Fig. 19A and respective portions of the spec). 



Application/Control Number: 10/044,164 Page 8 

Art Unit: 2664 

Referring to claim 29, Horst et al. discloses a routing device for controlling 
access to a network, comprising: 

a component having a filter (header, Fig. 3B and respective portions of the spec.) 
for a node, the filter (header, Fig. 3B and respective portions of the spec.) indicating 
valid parameters for communications transmitted by the node through the network; 

a component that receives communications from the node, the communications 
having parameters (priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6); 

a component that applies the filter to the communications to determining whether 
the parameters of the received communications are valid (validation, col. 17 line 53- 
col. 18 line 10 and validate, col. 18 lines 30-35); and 

a component that discards (discard, col. 6 lines 10-16) a received communication 
when it is determined that a parameter of the received communication is not valid. 

Referring to claim 30, Horst et al. discloses the routing device of claim 29 
wherein a parameter is a virtual address (virtual address, col. 18 lines 65-67 and col. 20 
lines 55-59) and the filter (header, Fig. 3B and respective portions of the spec.) 
indicates one or more virtual address (virtual address, col. 18 lines 65-67 and col. 20 
lines 55-59) that can be validly (validation, col. 17 line 53 - col. 18 line 10 and validate, 
col. 18 lines 30-35) used in a communication transmitted by the node. 

Referring to claim 31 , Horst et al. discloses the routing device of claim 29 
wherein a parameter relates to priority (priority, col. 44 lines 10-15 and col. 44 line 59- 
col. 45 line 6) of a communication and the filter (header, Fig. 3B and respective portions 
of the spec.) indicates a priority (priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 
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line 6) that can be validly (validation, col. 1 7 line 53 - col. 1 8 line 1 0 and validate i col. 
18 lines 30-35) used in a communication transmitted by the node. 

Referring to claim 32, Horst et al. discloses the routing device of claim 29 
wherein a parameter relates to class of service (class, col. 39 lines 58-60) of a 
communication and the filter (header, Fig. 3B and respective portions of the spec.) 
indicates a class of service (class, col. 39 lines 58-60) that can be validly (validation, 
col. 17 line 53 - col. 18 line 10 and validate, col. 18 lines 30-35) used in a 
communication transmitted by the node. 

Referring to claim 33, Horst et al. discloses the routing device of claim 29 
wherein the routing device (see Fig. 19A and respective portions of the spec.) has 
multiple ports connected to nodes and wherein each port has access to a filter (header, 
Fig. 3B and respective portions of the spec.) for the connected to node. 

Referring to claim 34, Horst et al. discloses the routing device of claim 29 
wherein the filter (header, Fig. 3B and respective portions of the spec.) is associated 
with a destination address assigned to the node and wherein the filter (header, Fig. 3B 
and respective portions of the spec.) is applied to communications transmitted by the 
node that have that destination address (destination address, col. 6 lines 1-16). 

Referring to claim 35, Horst et al. discloses the routing device of claim 29 
including notifying a network manager (CPU, col. 6 lines 1-16) when a communication is 
discarded (discard, col. 6 lines 10-16). 
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Referring to claim 36, Horst et al. discloses the routing device of claim 29 
wherein the filter (header Fig. 3B and respective portions of the spec.) is received from 
a network manager (CPU, col. 6 lines 1-16). 

Referring to claim 37, Horst et al. discloses the routing device of claim 36 
wherein the filter (header, Fig. 3B and respective portions of the spec.) is received from 
the network manager (CPU, col. 6 lines 1-16) during registration (initialization, col. 65 
lines 45-52) of the node. 

Referring to claim 38, Horst et al. discloses the routing device of claim 29 
including a component that indicates that the node is not allowed to transmit any 
communications when it is determined that the parameter (virtual address, col. 18 lines 
65-67 and col. 20 lines 55-59; priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 
6) of a received communication is not valid. 

Referring to claim 39, Horst et al. discloses the routing device of claim 29 
including when' it is determined that the parameter (virtual address, col. 18 lines 65-67 
and col. 20 lines 55-59; priority, col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6) of 
the received communication is not valid, indicating that the node is not allowed to 
transmit communications to a destination address (destination address, col. 6 lines 1- 
16) associated with the received communication. 

Referring to claim 40, Horst et al. discloses the routing device of claim 29 
including a component that transmits a received communication when it is determined 
that the parameters (virtual address, col. 18 lines 65-67 and col. 20 lines 55-59; priority, 
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col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6) of the received communication are 
valid (validation, col. 17 line 53 - col. 18 line 10 and validate, col. 18 lines 30-35). 

Referring to claim 41 , Horst et al. discloses the routing device of claim 29 
including a component that modifies the filter (header, Fig. 3B and respective portions of 
the spec.) so that the modified filter (header, Fig. 3B and respective portions of the 
spec.) is applied to subsequent communications received from the node. 

Referring to claim 42, Horst et al. discloses the routing device of claim 29, 
wherein the routing device is a switch (Fig. 19A and respective portions of the spec). 

Referring to claim 45, Horst et al. discloses a routing device for controlling 
access to a network, comprising: 

means for applying a filter (header, Fig. 3B and respective portions of the spec.) 
to communications received from a node to determining whether parameters of the 
communications are valid (validation, col. 17 line 53 - col. 18 line 10 and validate, col. 
18 lines 30-35); 

and 

means for discarding (discard, col. 6 lines 10-16) a communication when it is 
determined that a parameter of the communication is not valid. 

Referring to claim 46, Horst et al. discloses the routing device of claim 35 
wherein a parameter is a virtual address (virtual address, col. 18 lines 65-67 and col. 20 
lines 55-59) and the filter indicates one or more virtual addresses that can be validly 
used in a communication transmitted by the node. 



Application/Control Number: 10/044,164 Page 12 

Art Unit: 2664 , 

Referring to claim 47, Horst et al. discloses the routing device of claim 45 
wherein a parameter relates to priority (priority, col. 44 lines 10-15 and col. 44 line 59- 
col. 45 line 6) of a communication and the filter (header, Fig. 3B and respective portions 
of the spec.) indicates a priority (priority, col. 44 lines 10-15 and cot. 44 line 59-col. 45 
line 6) that can be validly (validation, col. 17 line 53 - col. 18 line 10 and validate, col. 
18 lines 30-35) used in a communication transmitted by the node. 

Referring to claim 48, Horst et al. discloses the routing device of claim 45 
wherein a parameter relates to class of service (class, col. 39 lines 58-60) of a 
communication and the filter (header, Fig. 3B and respective portions of the spec.) 
indicates a class of service (class, col. 39 lines 58-60) that can be validly used in a 
communication transmitted by the node. 

Referring to claim 49, Horst et al. discloses the routing device of claim 45 
wherein the routing device (see Fig. 19A and respective portions of the spec.) has 
multiple ports connected to nodes and wherein each port has access to a filter (header, 
Fig. 3B and respective portions of the spec.) for the connected-to node. 

Referring to claim 50, Horst et al. discloses the routing device of claim 45 
wherein the filter (header, Fig. 3B and respective portions of the spec.) is associated 
with a destination address assigned to the node and wherein the means for applying the 
filter applies it to communications transmitted by the node that have that destination 
address (destination address, col. 6 lines 1-16). 

Referring to claim 51 , Horst et al. discloses the routing device of claim 45 
including a component that transmits a received communication when it is determined 
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that the parameters (virtual address, col. 18 lines 65-67 and col. 20 lines 55-59; priority, 
col. 44 lines 10-15 and col. 44 line 59-col. 45 line 6) of the received communication are 
valid (validation, col. 17 line 53 - col. 18 line 10 and validate, col. 18 lines 30-35). 

Referring to claim 52, Horst et al. discloses the routing device of claim 45 
wherein the routing device is a switch (Fig. 19A and respective portions of the spec). 

Referring to claim 55, Horst et al. discloses the routing device of claim 45 
includes means for receiving a filter (header, Fig. 3B and respective portions of the 
spec.) from a network manager (CPU, col. 6 lines 1-16). 

Referring to claim 56, Horst et al. discloses the routing device of claim 56 
wherein the filter (header, Fig. 3B and respective portions of the spec.) is received 
during registration (initialization, col. 65 lines 45-52) of the node. 

4. The followingls a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis- for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

5. Claims 1, 17, 29 and 45 are rejected under 35 U.S.C. 102(b) as being anticipated 
by Hemmady et al. (U.S. Patent No. 4,872,160). 

Referring to claim 1 , Hemmady et al. discloses a method in a switch for 
controlling access to a network, the method comprising: 

for each node connected to the switch, receiving from a network manager 
addresses to which the node is authorized (authorized, col. 57 lines15-35, col. 66 lines 
1-40 and col. 67 lines'! 5-20) and to transmit a communication; 
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receiving a communication from a node, the communication having a destination 
address (destination address, col. 14 lines 15-20, col. 34 lines 10-15, col. 59 lines BO- 
SS, col. 60 lines 15-20 and col. 63 lines 45-60); 

determining base on the received addresses whether the node that transmitted 
the communication is authorized (authorized, col. 57 lines15-35, col. 66 lines 1-40 and 
col. 67 lines 1 5.-20) to transmit a communication to the destination address (destination 
address, col. 14 lines' 15-20, col. 34 lines 10-15, col. 59 lines 30-35, col. 60 lines 15-20 
and col. 63 lines 45-60); and 

when it is determined that the node is not authorized (unauthorized, col. 9 lines 
25-30, col. 47 Jines 40-50, col. 48 lines 10-15 and col. 65 lines 1-10), suppressing 
(discard, col. 16 lines 36-46, col. 16 line 64-68, col. 17 lines 48-68 and col. 41 lines 25- 
30) the transmitting of the received communication through the network. 

Referring to claim 17, Hemmady et al. discloses a method in a routing device for 
controlling access to a network, the method comprising: 

receiving a filter (header, col. 16 lines 36-46 and col. 41 lines 21-30) for a node, 
the filter indicating a valid parameter for a communication transmitted by the node 
through the network. 

receiving a communication from the node, the communication having a 
parameter (virtual address, col. 54 lines 50-65 and col. 55 lines 10-20; priority, col. 3 
lines 1-6, col. 6 lines 25-30, col. 8 lines 15-20, col. 26 lines 50-68, col. 27 lines 1-5, col. 
27 lines 20-50, col. 28 lines 9-55, col. 30 lines 30-35, col. 40 lines 40-50, col. 46 lines 5- 
40, col. 58 line's 5-10, col. 69 lines 14-21; class of service, col. 60 lines 19-26); 
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determining whether the parameter (virtual address, col. 54 lines 50-65 and col. 
55 lines 10-20; priority, col. 3 lines 1-6, col. 6 lines 25-30, col. 8 lines 15-20, col. 26 lines 
50-68, col. 27 lines 1-5, col. 27 lines 20-50, col. 28 lines 9-55, col. 30 lines 30-35, col. 

40 lines 40.-50, col. 46 lines 5-40, col. 58 lines 5-10, col. 69 lines 14-21; class of service, 
col. 60 lines 19-26) of the received communication is valid based on the received filter; 
and 

when it is determined that parameter of the received communication is not valid, 
suppressing (discard, col. 16 lines 36-46, col. 16 line 64-68, col. 17 lines 48-68 and col. 

41 lines 25-30) the transmitting of the received communication. 

Referring to claim 29, Hemmady et al. discloses a routing device for controlling 
access to a network, comprising: 

a component having a filter (header, col. 16 lines 36-46 and col. 41 lines 21-30) 
for a node, the filter indicating valid parameters (virtual address, col. 54 lines 50-65 and 
col. 55 lines 10-20; priority, col. 3 lines 1-6, col. 6 lines 25-30, col. 8 lines 15-20, col. 26 
lines 50-68, col. 27 lines 1-5, col. 27 lines 20-50, col. 28 lines 9-55, col. 30 lines 30-35, 
col. 40 lines 40-50, col. 46 lines 5-40, col. 58 lines 5-10, col. 69 lines 14-21; class of 
service, col. 60 lines 19-26) for communications transmitted by the node through the 
network; 

a component that receives communications from the node, the communications 
having parameters (virtual address, col. 54 lines 50-65 and col. 55 lines 10-20; priority, 
col. 3 lines 1-6, col. 6 lines 25-30, col. 8 lines 15-20, col. 26 lines 50-68, col. 27 lines 1- 
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5, col. 27 lines 20-50, col. 28 lines 9-55, col. 30 lines 30-35, col. 40 lines 40-50, col. 46 
lines 5-40, col. 58 lines 5-10, col. 69 lines 14-21; class of service, col. 60 lines 19-26); 

a component that applies the filter to the communications to determining whether 
the parameters (virtual address, col. 54 lines 50-65 and col. 55 lines 10-20; priority, col. 
3 lines 1-6, col. 6 lines 25-30, col. 8 lines 15-20, col. 26 lines 50-68, col. 27 lines 1-5, 
col. 27 lines 20-50, col. 28 lines 9-55, col. 30 lines 30-35, col. 40 lines 40-50, col. 46 
lines 5-40, col. 58 lines 5-10, col. 69 lines 14-21; class of service, col. 60 lines 19-26) of 
the received communications are valid; 

and 

a component that discards (discard, col. 16 lines 36-46, col. 16 line 64-68, col. 17 
lines 48-68 and col. 41 lines 25-30) a received communication when it is determined 
that a parameter of the received communication is not valid. 

Referring to claim 45, Hemmady et al. discloses a routing device for controlling 
access to a network, comprising: 

means for applying a filter (header, col. 16 lines 36-46 and col. 41 lines 21-30) to 
communications received from a node to determining whether parameters of the 
communications are valid, and 

means for discarding (discard, col. 16 lines 36-46, col. 16 line 64-68, col. 17 lines 
48-68 and col. 41 lines 25-30) a communication when it is determined that a parameter 
of the communication is not valid. 
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Allowable Subject Matter 

6. Claims 27, 28, 43, 44, 53 and 54 are objected to as being dependent upon a 
rejected base claim, but would be allowable if rewritten in independent form including all 
of the limitations of the base claim and any intervening claims. 

Conclusion 

7 Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(571 ) 273-8300, (for formal communications intended for entry) 
8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jamal A. Fox whose telephone number is (571) 272- 
3143. The examiner can normally be reached on Monday-Friday 6:30 AM - 5:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Wellington Chin can be reached on (571) 272-3134. The fax phone number 
for the organization where this application or proceeding is assigned is (571) 273-8300. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to 2600 Customer Service whose telephone number is 
(571)272-2600. 




Jamal A. Fox 
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